Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: [Snort-users] Source 0.0.0.0 Destination 0.0.0.0

From: twig les <twigles(at)yahoo.com>
Date: Sat Mar 29 2003 - 17:16:57 EST


I get those all the time because our proprietardy firewall mangles packets and no one knows why. Throw TCPdump on the wire and sniff for those src/dst and get the full packet. When I did that I found the culprit via MAC address and saw that the checksum was invalid.

> ATTACHMENT part 2 application/ms-tnef name=winmail.dat




Know yourself and know your enemy and you will never fear defeat.


Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com

This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There! NetWorld+Interop Las Vegas 2003 -- Register today! http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Sat Mar 29 17:37:38 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 11:50:31 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library